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DETAILED ACTION 

Status of Claims 

1 . This office action is in response to the amendment filed 10/21/2008 in which 
applicant amends claims 1-2, 9, 16, 21 and 23. Claims 1-23 are pending. 

Claim Rejections - 35 USC § 103 

2. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

3. Claims 1-4, 8, and 16-19 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Nguyen, Binh T. US 20020071557 A1 in view of Federal Information 
Processing Standards Publication 186 (FIPS) and Staring, Antonius A.M. (US 
20010007127 A1). 

4. In regards to claim 1 , Nguyen discloses generating a command at a master 
server or slave server, digitally signing it and transmitting to a receiving node for re- 
hashing and verification (fig 4, elements 400-420). Nguyen does not explicitly disclose 
digitally signing the command by performing a hashing function over at least a portion of 
a message that includes the command to produce a message digest and passing the 
message digest through a digital signature algorithm to produce a digitally signed 
command; verification wherein the digitally signed command from the transmitting mode 
is subjected to the hashing function to produce a message digest, the message digest is 
passed through the digital signature algorithm to produce a digitally signed command at 
the receiving node, and the digitally signed command at the receiving node is compared 
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to the digitally signed command from the transmitting mode to determine if there is a 
match. 

5. In related prior art, FIPS discloses a digital signature standard that digitally signs 
a message by using a hash function in the signature generation process to obtain a 
condensed version of data, called a message digest (see Figure 1). The message 
digest is then input to the DSA to generate the digital signature. The digital signature is 
sent to the intended verifier along with the signed data (often called the message). The 
verifier of the message and signature verifies the signature by using the sender's public 
key. The same hash function must also be used in the verification process. Similar 
procedures may be used to generate and verify signatures for stored as well as 
transmitted data. One skilled in the art would recognize the advantages of providing a 
secure way to authenticate the sender of a message in a network environment. 

6. Therefore it would have been obvious to one skilled in the art at the time of the 
invention to have modified Nguyen in view of FIPS in order to have included the digital 
signature method of FIPS in order to provide a secure authentication process. The 
combination made lacks including a session key that is changeable and associated with 
an index so that a receiving node can determine the session key used. 

7. In related prior art, Staring discloses that in encrypted systems it is useful to 
change session keys periodically (par 2) where the session keys are indexed so that a 
receiving node can determine the session key used (pars 12-14) to facilitate session 
key changes without the requirement of knowing what the decrypted data should look 
like (par 5). 
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8. Therefore it would have been obvious to one of ordinary skill in the art to have 
modified Nguyen in view of FIPS in view of Staring to have incorporated a session key 
index to facilitate frequent key changes without the requirement of the knowledge of the 
content of a message. The combination made lacks explicitly stating executing the 
command message at the subservient device, only if the signatures verify and 
generating a notification or alarm if the sender is not verified. 

9. However, as the goal of the system is to provide a secure communication 
system, it would be obvious to execute commands only if authorized and verified as 
otherwise the security of the system would be compromised. Furthermore, it would 
have been obvious to provide the system operator with notification of attempts to 
compromise the system so that they may determine the cause and protect the integrity 
of the system. As such it would have been an obvious modification to make to have the 
device only execute commands that are verified and authorized and to provide 
notification of attempted security breaches. 

10. In regards to claim 2, Nguyen discloses that the gaming machine generates 
encrypted data messages based on machine transactions (fig 4, elements 400-406). 
Examiner contends that this constitutes monitoring events to generate a command. 

11. In regards to claim 3, Nguyen discloses that the remote server or master of the 
system receives messages from the gaming machine and responds to the message (fig 
4, elements 426-431 ). Examiner contents that this constitutes monitoring events on the 
gaming machine by the master server as it receives event information from the gaming 
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machine thereby monitoring the event. Nguyen further discloses that the local server or 
slave receives the signed command (fig 4, element 408). 

12. In regards to claim 4, Nguyen discloses that the slave server processes and 
stores data generated by the gaming machine before re-encrypting and sending it to the 
master server (fig 4, element 412). Examiner contends that by storing the data the 
slave server is inherently monitoring the activities of the gaming machine. Nguyen 
further discloses sending a command from the master server to the gaming machine 
that the gaming machine verifies (fig 6). 

13. In regards to claim 8, Nguyen discloses that encryption may be optional over a 
dedicated communication network and then applied when the message reaches an 
unsecured channel (1 1 :39-47) 

14. In regards to claims 16 and 17, Nguyen discloses the receiving of commands 
with digital signatures and verifying the signatures at a slave device (par 58). Nguyen 
lacks explicitly stating verifying the digital signature at the subservient device by 
subjecting the command message to a hashing function to produce a message digest, 
passing the message digest through a digital signature algorithm to produce a digital 
signature at the subservient device, and comparing the digital signature at the 
subservient device to the digital signature included with the command message to 
determine if there is a match; and executing the command message at the subservient 
device, if the signatures verify. 

15. In related prior art, FIPS discloses a digital signature standard that digitally signs 
a message by using a hash function in the signature generation process to obtain a 
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condensed version of data, called a message digest (see Figure 1). The message 
digest is then input to the DSA to generate the digital signature. The digital signature is 
sent to the intended verifier along with the signed data (often called the message). The 
verifier of the message and signature verifies the signature by using the sender's public 
key. The same hash function must also be used in the verification process. Similar 
procedures may be used to generate and verify signatures for stored as well as 
transmitted data. One skilled in the art would recognize the advantages of providing a 
secure way to authenticate the sender of a message in a network environment. 

16. Therefore it would have been obvious to one skilled in the art at the time of the 
invention to have modified Nguyen in view of FIPS in order to have included the digital 
signature method of FIPS in order to provide a secure authentication process. The 
combination made lacks including a session key that is changeable and associated with 
an index so that a receiving node can determine the session key used. 

17. In related prior art, Staring discloses that in encrypted systems it is useful to 
change session keys periodically (par 2) where the session keys are indexed so that a 
receiving node can determine the session key used (pars 12-14) to facilitate session 
key changes without the requirement of knowing what the decrypted data should look 
like (par 5). 

18. Therefore it would have been obvious to one of ordinary skill in the art to have 
modified Nguyen in view of FIPS in view of Staring to have incorporated a session key 
index to facilitate frequent key changes without the requirement of the knowledge of the 
content of a message. The combination made lacks explicitly stating executing the 



Application/Control Number: 10/783,122 Page 7 

Art Unit: 3714 

command message at the subservient device, only if the signatures verify and 
generating a notification or alarm if the sender is not verified. 

19. In regards to claim 18, Nguyen discloses that the gaming device may receive 
signed messages and validate them (par 73). 

20. In regards to claim 19, Nguyen discloses generating a signed command at the 
master server, sending it to the slave server, and the slave server decrypting the 
message and forwarding to the gaming machine (par 62). 

21 . Claims 5-7 and 20 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Nguyen, Binh T. (US 20020071557 A1) in view of Federal Information Processing 
Standards Publication 1 86 (FIPS) and Staring, Antonius A.M. (US 2001 00071 27 A1 ) as 
applied to claims 1 and 16 above, and further in view of Torango et al. (USPN 
5885158). 

22. In regards to claims 5 and 6, Nguyen in view of FIPS and Staring discloses the 
method of claim 1 above, but lacks wherein the event further comprises an event 
triggering a bonus is to be paid or wherein the command further comprises a bonus 
command. 

23. In related prior art, Torango discloses a bonus system that generates bonus 
commands based on bonus triggering events (15:41-51). One skilled in the art would 
recognize the advantages of providing a progressive bonus game on a networked 
system in order to attract more players to a casino through higher potential payouts. 

24. Therefore it would have been obvious to one skilled in the art at the time to 
combine the secure system of Nguyen in view of FIPS and Staring with the progressive 
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system of Torango to provide a secure progressive system that would attract customers 
by offering larger potential payouts via a large group of networked devices. 

25. In regards to claim 7, Nguyen discloses generating a signed command at the 
master server, sending it to the slave server, and the slave server decrypting the 
message and forwarding to the gaming machine (par 62). Nguyen lacks explicitly 
stating that the message is a bonus command. 

26. In related prior art, Torango discloses a bonus system that generates bonus 
commands (1 5:41 -51 ). One skilled in the art would recognize the advantages of 
providing progressive games on a networked system to increase the size of the 
contributing player pool thereby offering larger potential payouts in order to attract 
players. 

27. Therefore it would have been obvious to one skilled in the art at the time to 
combine the secure system of Nguyen with the progressive system of Torango to 
provide a secure progressive system thus providing large potential payouts to attract 
customers. Nguyen in view of Torango lacks explicitly stating that the reply message is 
re-signed before sending it to the gaming machine. 

28. However, Nguyen already discloses signing the messages on the way to the 
slave server from the gaming device (fig 4) and discloses that the slave server decrypts 
and then forwards the message to the gaming machine as stated above. It would be 
obvious to also re-encrypt and sign the message before sending it to the gaming 
machine as suggested by Nguyen. 



Application/Control Number: 10/783,122 Page 9 

Art Unit: 3714 

29. In regards to claim 20, Nguyen in view of FIPS discloses the method of claim 1 6, 
but lacks disclosing the command comprising paying a bonus to a player at an 
electronic gaming machine. 

30. In related prior art, Torango discloses a bonus system that generates bonus 
commands including paying a bonus (15:41-51). One skilled in the art would recognize 
the advantages of providing progressive games on a networked system to increase the 
size of the contributing player pool thereby offering larger potential payouts in order to 
attract players. 

31 . Therefore it would have been obvious to one skilled in the art at the time to 
combine the secure system of Nguyen with the progressive system of Torango to 
provide a secure progressive system thus providing large potential payouts to attract 
customers. 

32. Claims 9-1 5 and 21-23 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over Torango et al. (USPN 5885158) in view of Nguyen, Binh T. (US 
20020071557 A1), Federal Information Processing Standards Publication 186 (FIPS) 
and Staring, Antonius A.M. (US 20010007127 A1). 

33. In regards to claim 9, Torango discloses a progressive bonus system where the 
central server generates bonus commands (1 5:41-51 ). Torango further discloses the 
use of verification of hardware identification (16:1-13). Torango lacks disclosing 
performing a hashing function over at least a portion of a message that includes the 
bonus command to produce a message digest and then passing the message digest 
through a digital signature algorithm to produce a digitally signed bonus command; and 
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transmitting the digitally signed bonus command from a transmitting node to an 
electronic gaming machine wherein the digitally signed bonus command from the 
transmitting mode is subjected to the hashing function to produce a message digest, the 
message digest is passed through the digital signature algorithm to produce a digitally 
signed bonus command at the gaming machine, and the digitally signed bonus 
command at the gaming machine is compared to the digitally signed bonus command 
from the transmitting mode to determine if they match. 

34. In related prior art, Nguyen discloses a system that is used to replace dedicated 
casino networks with secure communications over a general use network (par 15) 
where commands are digitally signed and transmitted to a gaming machine (par 62). 
Nguyen further discloses that some of the dedicated casino networks that may be 
replaced include network services for bonus game play, progressive game play and 
cashless ticketing (par 9). One skilled in the art would recognize the advantages of 
providing network security features to a networked progressive game system. 

35. Therefore it would have been obvious to one skilled in the art at the time to 
combine the security system of Nguyen with the bonus system of Torango in order to 
provide a secure bonus system. The combination made lacks performing a hashing 
function over at least a portion of a message that includes the bonus command to 
produce a message digest and then passing the message digest through a digital 
signature algorithm to produce a digitally signed bonus command; and 
transmitting the digitally signed bonus command from a transmitting node to an 
electronic gaming machine wherein the digitally signed bonus command from the 
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transmitting mode is subjected to the hashing function to produce a message digest, the 
message digest is passed through the digital signature algorithm to produce a digitally 
signed bonus command at the gaming machine, and the digitally signed bonus 
command at the gaming machine is compared to the digitally signed bonus command 
from the transmitting mode to determine if they match. 

36. In related prior art, FIPS discloses a digital signature standard that digitally signs 
a message by using a hash function in the signature generation process to obtain a 
condensed version of data, called a message digest (see Figure 1). The message 
digest is then input to the DSA to generate the digital signature. The digital signature is 
sent to the intended verifier along with the signed data (often called the message). The 
verifier of the message and signature verifies the signature by using the sender's public 
key. The same hash function must also be used in the verification process. Similar 
procedures may be used to generate and verify signatures for stored as well as 
transmitted data. One skilled in the art would recognize the advantages of providing a 
secure way to authenticate the sender of a message in a network environment. 

37. Therefore it would have been obvious to one skilled in the art at the time of the 
invention to have modified Torango in view of Nguyen further in view of FIPS in order to 
have included the digital signature method of FIPS in order to provide a secure 
authentication process. The combination made lacks including a session key that is 
changeable and associated with an index so that a receiving node can determine the 
session key used. 
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38. In related prior art, Staring discloses that in encrypted systems it is useful to 
change session keys periodically (par 2) where the session keys are indexed so that a 
receiving node can determine the session key used (pars 12-14) to facilitate session 
key changes without the requirement of knowing what the decrypted data should look 
like (par 5). 

39. Therefore it would have been obvious to one of ordinary skill in the art to have 
modified Torango in view of Nguyen and FIPS in view of Staring to have incorporated a 
session key index to facilitate frequent key changes without the requirement of the 
knowledge of the content of a message. The combination made lacks explicitly stating 
executing the command message at the subservient device, only if the signatures verify 
and generating a notification or alarm if the sender is not verified. 

40. However, as the goal of the system is to provide a secure communication 
system, it would be obvious to execute commands only if authorized and verified as 
otherwise the security of the system would be compromised. Furthermore, it would 
have been obvious to provide the system operator with notification of attempts to 
compromise the system so that they may determine the cause and protect the integrity 
of the system. As such it would have been an obvious modification to make to have the 
device only execute commands that are verified and authorized and to provide 
notification of attempted security breaches. 

41 . In regards to claim 10, Torango discloses monitoring gaming machine play (5:32- 
44). 
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42. In regards to claim 1 1 , Torango discloses determining if a machine is to receive a 
bonus (15:41-51). 

43. In regards to claims 12, Torango discloses the central server generating a bonus 
command (13:56-14:11). 

44. In regards to claim 13, Torango discloses that the slave server monitors 
communication and provide verification of prize wins (16:1-23). Torango lacks explicitly 
disclosing that the slave server generates the bonus command. However, it is well 
known in the art of network systems to have mirrored servers doing the same tasks to 
compensate for any network outages or problems. As such, it would have been an 
obvious modification to provide the slave server with the ability to handle bonus 
commands on its own in the event that the central server was unreachable. 

45. In regards to claim 14, Torango discloses that the bonus commands are sent to 
the game machine through the cluster controller (15-52-59). Torango lacks explicitly 
stating that the messages are signed. 

46. In related prior art, Nguyen discloses generating a signed command at the 
master server, sending it to the slave server, and the slave server decrypting the 
message and forwarding to the gaming machine (par 62). One skilled in the art would 
recognize the advantages of providing secure messages for a financial transaction 
system on an unsecured network. 

47. Therefore it would have been obvious to one skilled in the art at the time to 
combine the bonus system of Nguyen with the security system of Torango in order to 
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provide a secure bonus server. The combination made lacks transmitting a second 
digitally signed bonus command to the electronic gaming machine. 

48. However, Nguyen already discloses signing the messages on the way to the 
slave server from the gaming device (fig 4) and discloses that the slave server decrypts 
and then forwards the message to the gaming machine as stated above. It would be an 
obvious modification to also sign the message before sending it to the gaming machine 
as suggested by Nguyen as it would be mere duplication of steps. 

49. In regards to claim 15, Torango in view of Nguyen, FIPS and Starling disclose 
the method of claim 9 above, but lacks wherein the method comprises transmitting an 
unsigned message after the generation of the bonus command and digitally signing the 
bonus command at a slave server. Rather the combination teaches signing the 
messages at the master server. 

50. However, it would have been obvious to one skilled in the art that the operator of 
the game system would have the choice to use security measures on whatever portions 
of the system they chose as such a matter would have been mere design choice that 
fails to distinguish over the prior art. 

51 . In regards to claim 21 , Torango discloses a bonus server system that pays 
bonuses to players as directed (15:41-51) and further discloses that the gaming 
machines are verified by machine signatures and if invalid, the bonus is canceled (16:4- 
15). Torango lacks a digital signature; verifying the digital signature at a subservient 
device by subjecting the bonus message to a hashing function to produce a message 
digest, passing the message digest through a digital signature algorithm to produce a 
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digital signature at the subservient device, and comparing the digital signature at the 
subservient device to the digital signal included with the command message to 
determine if there is a match. 

52. In related prior art, Nguyen discloses a system that is used to replace dedicated 
casino networks with secure communications over a general use network (par 15) 
where commands are digitally signed and transmitted to a gaming machine (par 62). 
Nguyen further discloses that some of the dedicated casino networks that may be 
replaced include network services for bonus game play, progressive game play and 
cashless ticketing (par 9). One skilled in the art would recognize the advantages of 
providing network security features to a networked progressive game system. 

53. Therefore it would have been obvious to one skilled in the art at the time to 
combine the security system of Nguyen with the bonus system of Torango in order to 
provide a secure bonus system. The combination made lacks subjecting the bonus 
message to a hashing function to produce a message digest, passing the message 
digest through a digital signature algorithm to produce a digital signature at the 
subservient device, and comparing the digital signature at the subservient device to the 
digital signal included with the command message to determine if there is a match. 

54. In related prior art, FIPS discloses a digital signature standard that digitally signs 
a message by using a hash function in the signature generation process to obtain a 
condensed version of data, called a message digest (see Figure 1). The message 
digest is then input to the DSA to generate the digital signature. The digital signature is 
sent to the intended verifier along with the signed data (often called the message). The 
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verifier of the message and signature verifies the signature by using the sender's public 
key. The same hash function must also be used in the verification process. Similar 
procedures may be used to generate and verify signatures for stored as well as 
transmitted data. One skilled in the art would recognize the advantages of providing a 
secure way to authenticate the sender of a message in a network environment. 

55. Therefore it would have been obvious to one skilled in the art at the time of the 
invention to have modified Torango in view of Nguyen further in view of FIPS in order to 
have included the digital signature method of FIPS in order to provide a secure 
authentication process. The combination made lacks including a session key that is 
changeable and associated with an index so that a receiving node can determine the 
session key used. 

56. In related prior art, Staring discloses that in encrypted systems it is useful to 
change session keys periodically (par 2) where the session keys are indexed so that a 
receiving node can determine the session key used (pars 12-14) to facilitate session 
key changes without the requirement of knowing what the decrypted data should look 
like (par 5). 

57. Therefore it would have been obvious to one of ordinary skill in the art to have 
modified Torango in view of Nguyen and FIPS in view of Staring to have incorporated a 
session key index to facilitate frequent key changes without the requirement of the 
knowledge of the content of a message. The combination made lacks explicitly stating 
executing the command message at the subservient device, only if the signatures verify 
and generating a notification or alarm if the sender is not verified. 
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58. However, as the goal of the system is to provide a secure communication 
system, it would be obvious to execute commands only if authorized and verified as 
otherwise the security of the system would be compromised. Furthermore, it would 
have been obvious to provide the system operator with notification of attempts to 
compromise the system so that they may determine the cause and protect the integrity 
of the system. As such it would have been an obvious modification to make to have the 
device only execute commands that are verified and authorized and to provide 
notification of attempted security breaches. 

59. In regards to claim 22, Torango discloses manual intervention to resolve invalid 
payouts (16:15-21). 

60. In regards to claim 23, Torango discloses that the bonus commands are sent to 
the game machine through the cluster controller (15-52-59). Torango lacks disclosing 
verifying the digital signature at the subservient device comprising generating a second 
command message, providing a digital signature to the second command message and 
transmitting the second command message with the digital signature. 

61 . In related prior art, Nguyen discloses generating a signed command at the 
master server, sending it to the slave server, and the slave server decrypting the 
message and forwarding to the gaming machine (par 62). One skilled in the art would 
recognize the advantages of providing secure messages for a financial transaction 
system on an unsecured network. 

62. Therefore it would have been obvious to one skilled in the art at the time to 
combine the bonus system of Torango with the security system of Nguyen in order to 
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provide a secure bonus server. The combination made lacks explicitly stating that the 
reply message is re-signed before sending it to the gaming machine. 

63. However, Nguyen already discloses signing the messages on the way to the 
slave server from the gaming device (fig 4) and discloses that the slave server decrypts 
and then forwards the message to the gaming machine as stated above. It would be 
obvious to also re-encrypt and sign the message before sending it to the gaming 
machine as suggested by Nguyen. 

Response to Arguments 

64. Applicant's arguments filed 10/21/2008 have been fully considered but they are 
not persuasive. Applicant argues that Nguyen does not teach using a hash program to 
sign and verify a bonus. While examiner agrees that Nguyen is silent in this regard, it is 
the teachings of FIPS in combination with Nguyen that is relied upon by the examiner. 
One cannot show nonobviousness by attacking references individually where the 
rejections are based on combinations of references. See In re Keller, 642 F.2d 413, 
208 USPQ 871 (CCPA 1981); In re Merck & Co., 800 F.2d 1091, 231 USPQ 375 (Fed. 
Cir. 1986). 

65. Applicant also argues that in Nguyen messages are originated at the gaming 
machine. Applicant respectfully disagrees. In the examples of Nguyen, the request 
originates at the gaming machine; however, the server itself generates a reply message 
that is a new message not the same message as sent by the game machine. 



Application/Control Number: 10/783,122 Page 19 

Art Unit: 3714 

Conclusion 

66. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to DAVID W. DUFFY whose telephone number is 
(571)272-1574. The examiner can normally be reached on M-F 0830-1700. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Peter Vo can be reached on (571 ) 272-4690. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/John M Hotaling II/ 

Supervisory Patent Examiner, Art Unit 3714 



ID. W. D.I 

Examiner, Art Unit 3714 



